Senior Cloud Security & DevSecOps Engineer

Kainos; Hurley; On-site; GBP 90,000 - 120,000; Full time

Job summary

Kainos in the United Kingdom is seeking a Senior Security Engineer to embed security across cloud-based software delivery. You will work with multi-disciplinary Agile teams to design and implement secure solutions and practice DevSecOps throughout the SDLC.

In this role you will collaborate with development and cloud platform teams, drive threat modelling, vulnerability management, and security testing while translating findings into actionable security stories for delivery teams.

Qualifications

• Experience implementing application security or Cloud platform security.
• Experience in Defence Sector.
• Active Security Clearance.
• Understanding of web application security.
• Knowledge of cryptography for encryption in-transit, at-rest, hashing and signatures.
• Understanding threat modelling, vulnerability management, application security testing, and penetration testing.
• Experience integrating security tools into the SSDLC.
• Experience with version control and scripting or programming or IaC to automate tasks.
• Ability to convey security issues to technical and non-technical audiences.

Responsibilities

• Collaborate with development and cloud platform teams to plan and prioritise security requirements as part of the SSDLC.
• Recommend security best practices for cloud platforms and automating compliance with cloud security baselines (e.g. CIS Benchmarks).
• Implement automated security tooling in CI pipelines to validate security requirements and identify issues.
• Work with external organisations to plan, scope and facilitate penetration tests.
• Review outputs from security tools and security practices.
• Filter and prioritise results into security stories that are understood by delivery teams.
• Verify the implementation of security principles and architectural patterns.
• Drive adoption of cyber security practices within Agile delivery teams.

Skills

Application security

Cloud security

Threat modelling

Vulnerability management

Penetration testing

CI/CD security tooling

Strong communication

Tools

Static analysis tools

Dynamic analysis tools

Git

Scripting languages

Terraform/ IaC templates

Job description

Kainos in the United Kingdom is seeking a Senior Security Engineer to embed security across cloud-based software delivery. You will work with multi-disciplinary Agile teams to design and implement secure solutions and practice DevSecOps throughout the SDLC.

In this role you will collaborate with development and cloud platform teams, drive threat modelling, vulnerability management, and security testing while translating findings into actionable security stories for delivery teams.